Tenstorrent CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

LOW Tenstorrent CVE published 2026-10-21

CVE-2026-113743

A weakness in Tenstorrent tt-metal up to 0.80.0 allows for path traversal due to improper handling of the weight_map argument in the load_hf_state_dict_filtered function. This issue can be exploited remotely and a public exploit is available. Upgrading to version 0.81.0-dev20261016 fixes this issue. The vulnerability affects the function load_hf_state_dict_filtered of the file models/tt_transformers/tt/lo [truncated]